CNNVD-202508-2053 Information

CNNVD ID

CNNVD-202508-2053

CVE-2025-55591

  • CNNVD Published: 2025-08-18

Description (Chinese)

TOTOLINK A3002R是中国吉翁电子(TOTOLINK)公司的一款无线路由器。 TOTOLINK A3002R v4.0.0-B20230531.1404版本存在安全漏洞,该漏洞源于formMapDel端点中的devicemac参数存在命令注入。

Description (English)

TOTOLINK A3002R is a wireless router of the Chinese company TOTOLINK. TOTOLINK A3002R v.4.0.0-B2023531.1404 has a security loophole that originates from the command injection of devicemac parameters at the FormMapDel endpoint.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

吉翁电子

Published

2025-08-18

Last Modified

2026-02-24

References

https://github.com/goldenGlow21/softwares_PoC/blob/main/A3002R_V4/Boa%20-%20Command%20Injection/PoC%202.md https://nvd.nist.gov/vuln/detail/CVE-2025-55591 https://access.redhat.com/security/cve/cve-2025-55591

Share on: